Privacy notice (Datenschutzerklärung)

1. Controller

2. Principles

This site uses no cookies or advertising profiles. It uses Plausible Analytics as described below, including a script loaded from plausible.io. It loads no external fonts or embedded third-party content. Fonts are supplied by your device. Data is processed only as described below.

3. Visiting the site and server logs

The site is hosted on Microsoft Azure Static Web Apps, configured in the West Europe region, with Microsoft Ireland Operations Limited as hosting processor. Delivering a page involves processing technical access data, including your IP address, the time of access, the requested URL, browser information (user agent) and, where transmitted, the referring page.

This processing supports delivery, reliable operation and security. The legal basis is Article 6(1)(f) GDPR: the legitimate interest in operating a stable and secure website. Hosting is covered by Microsoft's data processing agreement under Article 28 GDPR. Where processing involves transfers outside the European Economic Area, the contractual safeguards include EU standard contractual clauses.

Technical access data is retained under the hosting provider's applicable operational and security retention rules. See Microsoft's Data Protection Addendum and Microsoft's privacy statement.

4. Web analytics (Plausible)

This site uses Plausible Analytics, provided by Plausible Insights OÜ, Tallinn, Estonia, to see which pages are read. The Plausible script is loaded from plausible.io. It records the page URL, the referring site, browser and device type, approximate location and engagement measurements, and presents aggregate statistics.

According to Plausible’s data policy, it uses no cookies or persistent identifiers and does not track visitors across websites or devices. The IP address and browser information are used to derive the approximate location and a daily identifier that is discarded after 24 hours; raw IP addresses and user-agent strings are not stored. Visitor data is processed and stored in the EU. This site sends a custom “404” event when a missing page is visited, to help identify broken links, and records clicks on links to other websites, with the address of the link, to see which sources and which subscription link readers use. It sends no custom personal information or revenue data to Plausible.

The legal basis is Article 6(1)(f) GDPR: the legitimate interest in knowing which pages are read, pursued with a tool that stores no personal data. Processing by Plausible is covered by its data processing agreement under Article 28 GDPR. You may object at any time by email (section 8); most content blockers also stop the script.

5. Contact by email

If you email the publisher, your email address, name and message are used to answer your enquiry. Article 6(1)(b) GDPR applies when the enquiry concerns entering into or performing a contract; otherwise Article 6(1)(f) applies to the legitimate interest in responding. Correspondence is deleted when it is no longer needed and no legal retention obligation applies.

6. Email subscription via Substack

The subscription link takes you to Substack. Registration and newsletter delivery happen through that external service under Substack's privacy policy. This website has no subscription form and collects no subscription details directly. Links to Substack and LinkedIn are ordinary links; those services receive a request only when you follow the link.

7. Disclosure of data

Data is disclosed only to the hosting and analytics providers named here, as necessary to provide the services described, to comply with a legal obligation, or with your consent. Data is not sold or used to create advertising profiles.

8. Your rights

Subject to the conditions in Articles 15 to 21 GDPR, you may request access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation. Where processing depends on consent, you may withdraw it without affecting the lawfulness of earlier processing.

To exercise your rights, email lorant@nullfte.com.

9. Right to lodge a complaint

Under Article 77 GDPR, you may complain to a supervisory authority, including in the country of your habitual residence, workplace or the alleged infringement. The relevant Bavarian authority is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Ansbach.

10. Currency

Last revised: 27 October 2026. This notice is updated when the site's processing or applicable requirements change. New scripts, forms or embedded services require a corresponding review before introduction.